JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.56.160.140

Recent Activity

Abuse confidence score ?

13% Caution

138 reports

31 reporters · latest 3 days ago

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-160-140.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 149.56.160.140

Export CSV

This IP address has been reported a total of 138 times from 31 distinct sources. 149.56.160.140 was first reported on December 31st 2021, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Australia with 1 report; Denmark with 1 report. The most common categories in these recent reports were: Hacking 1 time; Spoofing 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 nzhost.co.nz	2026-10-13 05:25:55 (3 days ago)	$f2bV_matches	Hacking Brute-Force
🇩🇰 SaltySoftworks	2026-10-06 00:30:35 (1 week ago)	User agent spoofing	Spoofing
🇹🇷 neron	2026-08-15 23:06:48 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-10 16:29:22 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-29 12:19:39 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-26 22:19:38 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-07-24 13:59:04 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovid ... show more (apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovider.com)] from 149.56.160.140 (NL/The Netherlands/crawl-149-56-160-140.dataproviderbot.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.56.160.140 - - [24/Jul/2026:15:58:52 +0200] "GET / HTTP/1.1" 301 527 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.140 - - [24/Jul/2026:15:58:52 +0200] "GET / HTTP/2.0" 200 154549 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.140 - - [24/Jul/2026:15:58:55 +0200] "GET /robots.txt HTTP/2.0" 200 617 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.140 - - [24/Jul/2026:15:58:57 +0200] "GET /sitemap_index.xml HTTP/2.0" 200 1273 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.140 - - [24/Jul/2026:15:58:59 +0200] "GET / HTTP/1.1" 200 160265 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" show less	Port Scan
🇺🇸 chronos	2026-05-06 19:23:02 (5 months ago)	[AUTORAVALT][[06/05/2026 - 16:23:01 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.160.140][cra ... show more [AUTORAVALT][[06/05/2026 - 16:23:01 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.160.140][crawl-149-56-160-140.dataproviderbot.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software] ... show less	Hacking Web App Attack
🇺🇸 vdub144	2026-04-24 15:34:15 (5 months ago)	Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpr ... show more Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpro/form.php?mode=js&g=23&s=1&t=1 \| UA: Mozilla/5.0 (compatible; Dataprovider.com) \| Blocked by: nginx-bot-hell show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 12:47:26 (5 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.140 (crawl-149-56-160-140.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.140 (crawl-149-56-160-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 08:47:18.696923 2026] [security2:error] [pid 2360451:tid 2360451] [client 149.56.160.140:41963] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6649"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.garagemensministry.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.garagemensministry.org"] [uri "/index.html"] [unique_id "aejDVqzGbutF7KuSHqq0VQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-04-12 03:04:41 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 jcbriar	2026-03-31 08:36:41 (6 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 02:01:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 149.56.160.140 (crawl-149-56-160-140.dataprovid ... show more (mod_security) mod_security (id:210492) triggered by 149.56.160.140 (crawl-149-56-160-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 21:01:40.503809 2026] [security2:error] [pid 20030:tid 20030] [client 149.56.160.140:51793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adoniahenterprises.com"] [uri "/goober_.htaccess"] [unique_id "aZpjhC3W51jiY1FhNfaLBwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-01-17 15:19:11 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-31 16:17:51 (9 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.140 (crawl-149-56-160-140.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.140 (crawl-149-56-160-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 11:17:46.450292 2025] [security2:error] [pid 11427:tid 11427] [client 149.56.160.140:51131] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.captainquirks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.captainquirks.com"] [uri "/contact/contact.php"] [unique_id "aVVMqggRMRVPbEiRPFWz6QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.139.118

🇮🇳 152.59.173.56

🇻🇳 125.253.123.34

🇰🇷 115.71.239.49

🇻🇳 113.161.222.150

🇮🇳 106.51.150.62

🇷🇴 92.118.39.71

🇳🇱 89.248.165.203

🇬🇧 87.236.176.168

🇺🇸 74.125.224.52

🇨🇦 38.132.56.241

🇮🇳 2409:40e3:2046:276b:38c9:66c2:952a:6b85

🇧🇪 198.235.24.239

🇦🇷 191.85.50.121

🇺🇸 151.240.58.186

🇫🇮 147.185.133.107

🇻🇳 117.2.123.19

🇰🇷 112.166.10.138

🇮🇳 103.211.19.154

🇮🇳 103.149.197.34